Vulnerability CVE-2007-6755

Vulnerability Name:

CVE-2007-6755 (CCN-88625)

Assigned:

2013-09-19

Published:

2013-09-19

Updated:

2022-11-01

Summary:

The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of those values.
Note: this is a preliminary CVE for Dual_EC_DRBG; future research may provide additional details about point Q and associated attacks, and could potentially lead to a RECAST or REJECT of this CVE.

CVSS v3 Severity:

6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

5.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N)
4.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N/E:U/RL:U/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

5.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N)
4.9 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N/E:U/RL:U/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): None

Vulnerability Type:

CWE-327

Vulnerability Consequences:

Bypass Security

References:

Source: CCN
Type: Ars Technica Web site
Stop using NSA-influenced code in our products, RSA tells customers

Source: MISC
Type: Third Party Advisory
http://arstechnica.com/security/2013/09/stop-using-nsa-influence-code-in-our-product-rsa-tells-customers/

Source: MISC
Type: Third Party Advisory
http://blog.cryptographyengineering.com/2013/09/rsa-warns-developers-against-its-own.html

Source: MISC
Type: Third Party Advisory
http://blog.cryptographyengineering.com/2013/09/the-many-flaws-of-dualecdrbg.html

Source: MITRE
Type: CNA
CVE-2007-6755

Source: MISC
Type: Third Party Advisory
http://rump2007.cr.yp.to/15-shumow.pdf

Source: MISC
Type: Not Applicable
http://stream.wsj.com/story/latest-headlines/SS-2-63399/SS-2-332655/

Source: MISC
Type: Third Party Advisory
http://threatpost.com/in-wake-of-latest-crypto-revelations-everything-is-suspect

Source: CCN
Type: EMC Web site
RSA BSAFE

Source: CCN
Type: IBM Security Bulletin 1959577
Dual_EC_DRBG vulnerability and RC4 stream cipher vulnerability affect WebSphere Transformation Extender Secure Adapter Collection (CVE-2007-6755, CVE-2015-2808)

Source: CCN
Type: US-CERT VU#274923
Dual_EC_DRBG output using untrusted curve constants may be predictable

Source: BID
Type: Third Party Advisory, VDB Entry
63657

Source: CCN
Type: BID-63657
Dual Elliptic Curve Deterministic Random Bit Generation Predictable Random Number Generator Weakness

Source: XF
Type: UNKNOWN
rsa-bsafe-cve20076755-sec-bypass(88625)

Source: MISC
Type: Third Party Advisory
https://www.schneier.com/blog/archives/2007/11/the_strange_sto.html

Vulnerable Configuration:

Configuration 1:

cpe:/a:dell:bsafe_crypto-c-micro-edition:*:*:*:*:*:*:*:* (Version >= 3.0.0.0 and <= 3.0.0.20)

OR cpe:/a:dell:bsafe_crypto-j:5.0.1:*:*:*:*:*:*:*

OR cpe:/a:dell:bsafe_crypto-j:5.0:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:rsa:bsafe_crypto-c_me:3.0:*:*:*:*:*:*:*

OR cpe:/a:rsa:bsafe_crypto-j:4.1:*:*:*:*:*:*:*

OR cpe:/a:rsa:bsafe_crypto-c_me:3.0.0.1:*:*:*:*:*:*:*

OR cpe:/a:rsa:bsafe_crypto-c_me_mfp_psos:3.0.0.1:*:*:*:*:*:*:*

OR cpe:/a:rsa:bsafe_crypto-c_me_mfp_vxworks:3.0.0.1:*:*:*:*:*:*:*

OR cpe:/a:rsa:bsafe_crypto-c_me_mfp_psos:3.0.0.2:*:*:*:*:*:*:*

OR cpe:/a:rsa:bsafe_crypto-c_me:3.0.0.14:*:*:*:*:*:*:*

OR cpe:/a:rsa:bsafe_crypto-c_me:3.0.0.15:*:*:*:*:*:*:*

OR cpe:/a:rsa:bsafe_crypto-c_me:3.0.0.16:*:*:*:*:*:*:*

OR cpe:/a:rsa:bsafe_crypto-c_me:3.0.0.19:*:*:*:*:*:*:*

OR cpe:/a:rsa:bsafe_crypto-c_me:3.0.0.20:*:*:*:*:*:*:*

OR cpe:/a:rsa:bsafe_crypto-j_jsafe_and_jce:5.0:*:*:*:*:*:*:*

OR cpe:/a:rsa:bsafe_crypto-j_jsafe_and_jce:5.0.1:*:*:*:*:*:*:*

OR cpe:/a:rsa:bsafe_crypto-j_jsafe_and_jce:6.0:*:*:*:*:*:*:*

AND

cpe:/a:ibm:websphere_transformation_extender:8.3.0.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_transformation_extender:8.3.0.6:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_transformation_extender:8.4.0.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_transformation_extender:8.4.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_transformation_extender:8.4.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_transformation_extender:8.4.0.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_transformation_extender:8.4.0.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_transformation_extender:8.4.1.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_transformation_extender:8.4.1.1:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:com.ubuntu.bionic:def:200767550000000	V	CVE-2007-6755 on Ubuntu 18.04 LTS (bionic) - low.	2013-10-11
oval:com.ubuntu.artful:def:20076755000	V	CVE-2007-6755 on Ubuntu 17.10 (artful) - low.	2013-10-11
oval:com.ubuntu.trusty:def:20076755000	V	CVE-2007-6755 on Ubuntu 14.04 LTS (trusty) - low.	2013-10-11
oval:com.ubuntu.xenial:def:200767550000000	V	CVE-2007-6755 on Ubuntu 16.04 LTS (xenial) - low.	2013-10-11
oval:com.ubuntu.bionic:def:20076755000	V	CVE-2007-6755 on Ubuntu 18.04 LTS (bionic) - low.	2013-10-11
oval:com.ubuntu.xenial:def:20076755000	V	CVE-2007-6755 on Ubuntu 16.04 LTS (xenial) - low.	2013-10-11
oval:com.ubuntu.cosmic:def:20076755000	V	CVE-2007-6755 on Ubuntu 18.10 (cosmic) - low.	2013-10-11
oval:com.ubuntu.cosmic:def:200767550000000	V	CVE-2007-6755 on Ubuntu 18.10 (cosmic) - low.	2013-10-11
oval:com.ubuntu.precise:def:20076755000	V	CVE-2007-6755 on Ubuntu 12.04 LTS (precise) - low.	2013-10-11

BACK